Trustbank says unauthorized access leaked 4,454,097 Furusato Choice member records

Trustbank said on 20 October that third-party unauthorized access to member data in its Furusato Choice service had leaked donors’ personal information ^[1]. It said unusual access was noticed on 19 October, the intrusion and leak were confirmed to have occurred on 17 October, and related services were halted at 15:50 on 19 October; 4,454,097 records have so far been confirmed taken, including names, email addresses, addresses, phone numbers, hashed passwords and estimated donation-deduction amounts, with figures subject to change ^[1]. The company asks anyone who reused the same Furusato Choice email and password on other services to change those passwords, and warns people not to open unsolicited email or SMS links or attachments, or enter personal data or passwords on suspicious sites ^[1].

Industries mainly affected: Professional services

1. If you used the same email and password on other services, change those passwords ^[1].
2. Do not open unsolicited email or SMS links or attachments, or enter personal data or passwords on suspicious sites .